There is a stealth (stop OS detection) patch for 2.2.x, does anyone know if there is one for 2.4.x?
i think grsecurity does it.
it doesnt list it in features, but from the config help:
"This hinders os fingerprinters and keeps your machine from being used as a bounce for an untraceable portscan."
check it out